inbound-library/ops/systemd/inbound-library.service
tegwick b46355d6b0 Read the IMAP credential from OpenBao via AppRole on every run.
ILIB-WP-0003-T04: stdlib AppRole login, single KV v2 read and token
revoke-self; no env-file cache; credential_unavailable keeps matching
and notices running. Five fake-OpenBao tests; 19 total pass.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1170398@bnt-lap001
Assistant-Session: 622cd705-cb31-4322-ba08-dd42e44fa583
2026-10-05 13:13:51 +02:00

11 lines
454 B
Desktop File

[Unit]
Description=inbound-library intake, matching and notices
After=network-online.target
[Service]
Type=oneshot
WorkingDirectory=%h/inbound-library
# The IMAP credential is read from OpenBao on every run through the inbound-library
# AppRole (config/library.json "credential"). Nothing is cached on disk. OpenBao is
# reached through the openbao-ui-railiance01 bridge forward on 127.0.0.1:18200.
ExecStart=/usr/bin/python3 -m inbound_library run-due